3 - Implementing VLANs and STP Flashcards

1
Q

What is a VLAN?

A

A separate broadcast domain, virtually created on the switch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How do VLANs improve security and host performance?

A

Fewer hosts see copies of frames (broadcasts, multicasts, unknown unicasts) sent by one host, because it creates smaller broadcast domains. Allow per VLAN security policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

When do you need VLAN trunking and what does it do?

A

Networks with multiple interconnected switches. Allows traffic for multiple VLANs to be sent over a single link

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a VLAN tag?

A

A small header added to an Ethernet frame so that frames can be identified as belonging to a given VLAN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the two trunking protocols Cisco primarily supports and which is more popular?

A

Inter-Switch Link (ISL)

IEEE 802.1Q is more popular

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How do ISL and IEEE 802.1Q differ?

A

802.1Q inserts an extra 4 byte VLAN header into the original frame’s Ethernet header (that also contains the VLAN ID)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How many bits is the VLAN ID inside the 802.1Q header?

A

12 bits

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the max number of VLANs supported by ISL and 802.1Q?

A

4096 but only 4094 usable. 0 and 4095 are reserved.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What number VLANs are in the standard range?

A

1 - 1005

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What number VLANs are in the extended range?

A

1006 - 4094

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the default native VLAN?

A

1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does 802.1Q do with frames in the native VLAN?

A

Nothing. It does not add a header

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are non-trunking interfaces called?

A

Access interfaces / static access interfaces

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What commands would you use to setup a VLAN and add a port to it on a switch?

A
vlan 10
name TestVLAN
interface f0/10
switchport access vlan 10
switchport mode access
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How could you list simple VLAN information on a switch?

A

show vlan brief

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is special about VLANs 1002-1005?

A

They cannot be deleted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How can you disable VTP on a Switch?

A

vtp mode transparent

vtp mode off

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What does VTP transparent mode do?

A

Prevent VTP from learning and advertising about VLAN configuration itself, but still forwards VTP advertisements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How can you check VTP status?

A

show vtp status

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

True / False: The show running-config command shows VLAN commands

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is DTP for?

A

Dynamic Trunking Protocol. Two connected switches use this protocol to negotiate which type of trunking to use (ISL or 802.1Q)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

How does the dynamic desirable Trunk administrative mode work?

A

Initiates negotiation messages and responds to negotiation messages to trunk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

How does the dynamic auto Trunk administrative mode work?

A

Passively waits to receive trunk negotiation messages at which point the switch will respond and negotiate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the operational mode of an interface?

A

The mode that it is currently actually active on an interface, e.g. static access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is the default administrative trunking mode on an interface?

A

dynamic auto

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What command would you use to show all interfaces that are trunking?

A

show interfaces trunk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

How could you show information for a specific VLAN?

A

show vlan id 2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What happens when one end of a link has its trunking administrative mode set to trunk and the other to access?

A

This causes problems. Avoid this combination

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What does Cisco recommend configuring trunk negotiation to for better security?

A

Disabling it on most ports

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What two commands could you use to disable DTP / trunking negotiations?

A

switchport mode access

switchport nonegotiate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is IP telephony?

A

Phones using IP packets to send and receive voice represented as bits in an IP packet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is a Cisco product that performs IP telephony control

A

Cisco Unified Communication Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What did Cisco do to help solve the issue of only a single UTP cable being available at a persons desk but needing one for the phone and one for their PC?

A

Embedded a small three-port switch into each phone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Given a phone and a PC are recommended to be in different VLANs, how does a Switch port support a phone and a PC?

A

Port acts like an access link for the PCs traffic and a bit like a trunk for phone traffic. Two VLANs: Data VLAN and Voice VLAN. The port mostly acts like an access port, but Voice frames flow with 802.1Q headers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

How would you configure a switch with a data and voice vlan?

A
vlan 10
vlan 11
interface range F0/1-4
switchport mode access
switchport access vlan 10
switchport voice vlan 11
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

How can you view detailed information about the operation of an interface?

A

show interfaces F0/1 switchport

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Do interfaces with Voice VLANs enabled show up in the output of the ‘show interfaces trunk’ command?

A

No. But show interfaces F0/1 trunk would list additional information with a status of not-trunking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

How would you enable or disable a vlan?

A

no shutdown vlan 10

shutdown vlan 20

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What command would you use to show which VLANs will be forwarded over a given trunk interface?

A

switchport interfaces F0/1 trunk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What command is used to administratively limit which VLANs are allowed on a trunk interface?

A

switchport trunk allowed vlan 1-60

41
Q

What is VLAN hopping?

A

When a frame is sent in one VLAN but believed to be in a different VLAN. This would occur when two switches had configured their native VLANs to different numbers

42
Q

What does STP/RSTP prevent?

A

It prevents frames looping indefinitely in LANs with redundant links

43
Q

What is a broadcast storm?

A

When a frame is looping around the network indefinitely, saturating all links with multiple copies of that frames preventing normal frames from being processed

44
Q

What is MAC table instability?

A

An issue where MAC address tables keep changing because frames with the same source MAC arrive on different ports, such as in a broadcast storm

45
Q

What are the three main classes of problem caused by not using STP in redundant LANs?

A

Broadcast storms
MAC table instability
Multiple frame transmission

46
Q

What is STP convergence?

A

When switches in a LAN realize there has been a topology change and update interface blocking / forwarding states

47
Q

How does STP/RSTP work?

A

Uses the STA (Spanning Tree Algorithm) to create a spanning tree of interfaces that forward frames, effectively creating a single path to and from each link

48
Q

What are the three steps STP/RSTP uses to decide if an interface should go into the forwarding state?

A
  1. Elect a root switch and put all working interfaces on it in the forwarding state
  2. Every non root switch places its root port (RP) (least root cost path) into forwarding state
  3. For every two switches on a link, the one whos port has the lowest root cost is placed in the forwarding state. This switch is the designated switch, with its designated port (DP)
49
Q

What is a non root switches root cost?

A

The port considered to have the least administrative cost between it and the root switch

50
Q

What is a designated port?

A

A Switch port designated to forward onto a collision domain. Basically the Switch with the lower cost to reach the root among both switches on a segment becomes the DP on that segment

51
Q

What is a BID?

A

Bridge ID
8 byte value must be unique to each switch
Made of 2 bytes priority field, 6 bytes burned in System ID

52
Q

What is a BPDU? What is an alternative name for them?

A

Bridge Protocol Data Unit

Configuration BPDUs

53
Q

What is BPDU used for?

A

For switches to exchange information with each other

54
Q

What is the most common BPDU and what is it used for?

A

BPDU Hello

  • Sending switch’s BID
  • Sender’s root cost
  • Root bridge ID
  • Timer values on root switch
55
Q

What is the sender’s Root Cost in a Hello BPDU?

A

The cost between the switch and the current root

56
Q

What is important about the BID in the Root election process?

A

The switch with the lowest BID becomes the root (based on the 2 byte priority value at the start)

57
Q

What happens if there is a tie in BID priority in the Root election process?

A

The switch with the lowest MAC becomes the root

58
Q

How does the Root election process take place?

A

Each Switch sends a Hello BPDU claiming it is root.

If a Switch receives a Hello BPDU from another Switch that has a lower priority then it stops advertising itself as root and starts forwarding the superior Hello BPDU

59
Q

What happens if there is a tie between root cost for two paths when selecting a root port?

A
  1. Choose based on lowest neighbor bridge ID
  2. Choose based on lowest neighbor port priority
  3. Choose based on lowest neighbor internal port number
60
Q

What does a non-root switch do when forwarding a Hello?

A
  1. Sets the root cost field in the Hello to that Switches cost to reach the root
  2. Changes the senders BID to its own BID
  3. Forwards the Hello out all designated ports
61
Q

What happens if there is a tie for advertised costs when selecting a Designated Port (DP)?

A
  1. The Switch with the lowest BID wins
62
Q

What two additional tie breakers are sometimes needed for ties in advertising cost when electing a DP?

A
  1. Lowest interface STP/RSTP priority

2. Lowest internal interface number

63
Q

What are the two main tools used by engineers to influence choices in STP/RSTP?

A
  1. Changing the BID

2. Changing STP/RSTP port costs

64
Q

What are the default port costs used by Cisco in STP/RSTP?

A

100 for 10Mbps
19 for 100Mbps
4 for 1000Mbps
2 for 10Gbps

65
Q

How often does an STP root switch send a new Hello BPDU by default?

A

2 seconds

66
Q

How often does the root Switch send Hellos?

A

Every 2 seconds

67
Q

What are the three STP timers and their default values?

A

Hello timer - 2 seconds
MaxAge timer - 10 x Hello timer
Forward delay - 15 seconds

68
Q

What is the MaxAge timer?

A

How long any switch should wait after ceasing to hear Hellos before trying to change the STP topology

69
Q

What is the Forward Delay timer?

A

Delay that affects the process that occurs when an interface changes from blocking to forwarding state. The port stays in interim listening state then learning state for the number of seconds defined by this timer

70
Q

What are the two transitory phases in STP and what is their purpose?

A

Listening and Learning

To prevent temporary loops

71
Q

What is the Listening state in STP?

A

Interface does not forward frames

Old stale / unused MAC table entries for which no frames are received during this period are removed

72
Q

What is the Learning state in STP?

A

Interface does not forward frames

Switch begins to learn MAC address of frames received on the interface

73
Q

What is the time between each interim state in STP?

A

The time set in the Forward delay counter (15 seconds default)

74
Q

What is the RSTP equivalent of the STP blocking state?

A

Discarding state

75
Q

What is the key improvement brought by RSTP?

A

Faster convergence time

76
Q

How does RSTP improve speed?

A

Changes and adds ways to avoid waiting long periods on STP timers. This means quicker transitions between blocking / discarding to forwarding and vice versa

77
Q

What are two new mechanisms added by RSTP with respect to ports that improve speed over STP?

A
  1. Mechanism added for Switch to replace Root port without any waiting to reach forwarding state
  2. Mechanism added to replace Designated port without any waiting to reach forwarding state
78
Q

What does RSTP shorten the MaxAge timer to?

A

3 x the Hello timer

79
Q

What is an alternate port in RSTP?

A

Port that replaces the root port if it fails

80
Q

What is a backup port in RSTP (for designs that use Hubs)?

A

Port that replaces a designated port if it fails

81
Q

What does RSTP do differently to STP with regards to Hello BPDUs?

A

Instead of the Root port generating Hello and all other switches forwarding it as with STP, each switch independently generates its own Hellos

82
Q

How does RSTP allow switches to avoid waiting for timers to expire as a means to learn information?

A

Neighbors can query each other rather than waiting for timers to expire

83
Q

What does RSTP do differently to STP with respect to selecting a RP role?

A

STP only selects one Root port role. RSTP does this but also identifies other potential root ports naming them alternate ports

84
Q

What is the criteria to be an Alternate port?

A

Both the Root port and the port in question must receives Hellos that identify the same root switch

85
Q

How long must an alternate port wait before changing state and forwarding when taking over from a Root port?

A

It doesn’t need to wait for any timers between states or before forwarding, it can do this immediately

86
Q

What state does RSTP not have that STP has?

A

Listening

87
Q

What are the two STP states equivalent to the RSTP Discarding state?

A

Blocking

Disabled (administratively)

88
Q

What is the problem with MAC table entries during topology changes?

A

Existing entries may cause a loop. This is why switches have to time them out / clear them

89
Q

How does RSTP achieve MAC table clearing during topology changes?

A

Exchange of BPDU messages with neighbors

90
Q

True/False: Hubs force attached Switch ports to use half-duplex logic

A

True

91
Q

What assumption does RSTP make about half-duplex ports?

A

That they may be connected to hubs, so it treats them as shared ports.

92
Q

What is EtherChannel and what is a benefit of it?

A

Combines multiple parallel segments of equal speed between the same pair of switches, bundled into an EtherChannel.

Prevents STP convergence being needed when only a single port / cable failure occurs.

93
Q

By default how many parallel segments can be in an EtherChannel?

A

Up to 8

94
Q

What is PortFast?

A

Allows a switch port to immediately transition from blocking to forwarding state, bypassing listening and learning

95
Q

What ports can you safely enable PortFast on?

A

You must only enable it on ports you know don’t have bridges, switches or any other STP speaking devices connected

96
Q

What must you wait for a switch to do if a port without PortFast was connected to an end user device and it powered on?

A

Wait for the switch to confirm the port is a DP, and in STP transition through the temporary listening and learning states

97
Q

What port types (PTP types) does RSTP enable PortFast on?

A

Point-to-Point Edge ports

98
Q

What is BPDU Guard?

A

A feature that disables a port if any BPDUs are received on that port, i.e. ports that should only ever be used as access ports

99
Q

Why is BPDU Guard useful?

A

To prevent an attacker connecting a switch to the port, affecting the topology, potentially copying data or causing loops